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What is claimed is: 

1. A computerized method of transferring encrypted data between and among 
medical data management systems comprising: 

recognizing data to be transmitted by a device; 

determining a level of encryption dependent upon the nature of information to be 
transmitted by the device; 

encrypting the data using a first secure key length for sensitive data; 
encrypting the data using a second key length for remaining data; and 
transmitting the data over a data communications media. 

2. The method of claim 1 further comprising the steps of processing, using a secure 
key, a checksum of safety-critical data prior to transmitting the safety-critical data, and 
also' comprising the step of transmitting the checksum after the step of transmitting the 
data over the data communications network. 

3. The method of claim 2, further comprising the step of authenticating the integrity 
and source of the safety-critical data using the checksum. 

4. The method of claim 1 wherein the data communications media over which data 
20 is transmitted is a data communications network. 

5. The method of claim 4, wherein the data communications network is a public 
internetwork. 
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6. The method of claim 5, wherein the public network is the Internet. 

7. An apparatus for variably encrypting and transferring medical data comprising: 
a classifier having means for receiving an input of medical data from amedical 

device or a data management system, assigning a classification based upon what 
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the medical data represents, and outputting the classified medical data to a 
segregator; 

a segregator having means for separating medical data into discrete data payloads 
according to the classification assigned the medical information by the classifier 
and outputting the segregated medical data to an encryptor; 

an encryptor having means for variably encrypting segregated medical data based 
upon the level of security assigned to a particular payload of medical data and 
transmitting the variably encrypted data over a data communications media. 

8. The apparatus of claim 7, wherein the means for variably encrypting and 
transferring of medical data can be implemented on various networks including the 
Internet and the World Wide Web. 

9. The apparatus of claim 7, wherein the medical data comprises real-time data from 
patient monitoring equipment. 

10. The apparatus of claim 9, wherein the patient monitoring equipment comprises an 
implantable medical device. 

11. The apparatus of claim 7, wherein the means for assigning a classification based 
upon what the medical data represents assigns to real-time data from patient monitoring 
equipment a classification that will not be encrypted. 

12. A network communications system linking an IMD to an information node via a 
secure medical information exchange network, comprising: 

at least one key source in data communication with the IMD interface device and 
with the information node for transmitting an encryption key to the IMD 
interface device and a decryption key to the expert-data center; 

an encryption engine residing within an IMD interface device for performing data 
modification information using the encryption key; 



20 



P8841.00 



PATENT 



data communication means between the IMD interface and the medical 

information exchange network; 
and a decryption engine residing within the information node having means to 

decrypt the encrypted sensitive information using the decryption key. 

13. The network communications system of claim 12, wherein the information node 
is a clinician computer. 

14. The network communications system of claim 12, wherein the information node 
is a remote expert system server. 

15. The network communication system of claim 12, wherein the encryption engine is 
adapted to recognize non-real time data for encryption. 

1 6 A network communications system for transmitting HMD instruction information 
from an information node to an IMD via a secure medical information exchange 

network, comprising: 

at least one key source in data communication with the IMD interface device and 

with the information node for transmitting a decryption key to the IMD 

interface device and a encryption key to the information node; 
data communication means between the IMD interface and the medical 

information exchange network; 
an encryption engine residing within the information node having moans for 

performing data modification of IMD instruction information; and 
a decryption engine residing within an IMD interface device for performing data 
modification information for performing data integrity confirmation. 

, 7 The network communications system of claim 16, wherein the key sources 
comprise hardware devices having keys hard coded into the IMD and IMD interface pair, 
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* a stored key source residing on the information node, respective*. 

„ ■n.enetwortcconnnnnicationssys.emofCain, ,6, wherein data nansmitted fion, 

xhe network connnnnicauons system of data .8, wherein the native^ 
comprises IMD instructions. 

^ n f riaim 1 8 wherein the native data 

20. The network communications system of claim 18, wne 

comprises IMD software upgrades. 

, , • n nr1fi wherein the IMD interface is in communication 

21. The system of claim 12 or 16, wherein 

with an IMD implanted in a patient. 

22 A computerized memod of securely transferring data between an M> and a 

encrypting the sensitive information, transmitted torn the IMD 
theMDinterfacedeviccwiththeenciyphonltey; 

the remote information node, and 
decryption key. 

data, diagnostic data and device data. 
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24. Themethodofc.aimlSwheremsaiddaU.obe—.distransfe^based 
on differentiated encryption scheme. 
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